A program officer and a security manager are planning a focus group discussion with community members on potential risks related to projects on…

According to ISO 31000, the first step in the risk management process is "Establishing the Context" (Clause 6.3). This involves understanding the external and internal environment. For a community-based project, the external context is critical. Discussing the community's existing views on the role of girls directly addresses the social and cultural factors of the external environment. This understanding is fundamental to identifying potential risk sources, such as social backlash or resistance, and for defining risk criteria before proceeding to risk identification and assessment. This approach ensures the risk management process is tailored to the specific social dynamics in which the project will operate.

A. This is part of risk identification and analysis (ISO 31000, Clause 6.4), which occurs after the context has been established.

B. This relates to the organization's internal context (its principles and values), not the primary purpose of a focus group with community members to understand the external environment.

C. This involves defining a project goal or concept, rather than understanding the existing social and cultural context in which the project will be implemented.

---

1. International Organization for Standardization (ISO). (2018). ISO 31000:2018 Risk management — Guidelines.

Clause 6.3.2

External context: This clause states that in defining the external context

an organization should consider "the social

cultural

political

legal

regulatory

financial

technological

economic

natural and competitive environment

whether international

national

regional or local." Option D is a direct application of understanding the local social and cultural environment.

2. Purdy

G. (2010). ISO 31000:2009—Setting a New Standard for Risk Management. Risk Analysis: An International Journal

30(6)

881-886. https://doi.org/10.1111/j.1539-6924.2010.01442.x

Page 884

Section "The Framework": The article emphasizes that the ISO 31000 process begins with establishing the context

which includes understanding stakeholder perceptions and the external environment. The focus group in the scenario is a method to engage stakeholders (community members) to understand this context.

3. The University of Sydney. (2021). Risk Management Framework.

Section 3.2

"Establish the Context": This university framework

aligned with ISO 31000

states

"Establishing the context involves defining the external and internal parameters to be taken into account when managing risk... The external context includes... social and cultural trends

and our relationships with

and the perceptions and values of

our external stakeholders." This directly supports engaging the community to understand their views as a foundational step.